Price of zero-day exploits rises as companies harden products against hackers

Tools that allow government hackers to break into iPhones and Android phones, popular software like the Chrome and Safari browsers, and chat apps like WhatsApp and iMessage, are now worth millions of dollars — and their price has multiplied in the last few years as these products get harder to hack. On Monday, startup Crowdfense … Read more

Google Fixes a Seventh Zero-Day Flaw in Chrome—Update Now

Google’s Pixel devices have already received the November update, along with some additional fixes. The November Android Security Bulletin has also started to roll out to some of Samsung’s Galaxy line. Microsoft Microsoft has a Patch Tuesday every month, but November’s is worth notice. The update fixes 59 vulnerabilities, two of which are already being … Read more

State-backed hackers are exploiting new ‘critical’ Atlassian zero-day bug

Microsoft says Chinese state-backed hackers are exploiting a “critical”-rated zero-day vulnerability in Atlassian software to break into customer systems. The technology giant’s threat intelligence team said in a post on X, formerly Twitter, that it has observed a nation-state threat actor it calls Storm-0062 exploiting a recently disclosed critical flaw in Atlassian Confluence Data Center … Read more

Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws

Earlier in the month, Google fixed another zero-day flaw, a heap buffer overflow issue initially tracked as CVE-2023-4863, which it thought impacted only the Chrome browser. But two weeks after fixing the issue, researchers discovered it was worse than they thought, affecting the widely-used libwebp image library for rendering images in the WebP format. Now … Read more

Kaspersky Says New Zero-Day Malware Hit iPhones—Together with Its Personal

“The safety of iOS, as soon as breached, makes it actually difficult to detect these assaults,” says Wardle, who was previously an NSA staffer. On the identical time, although, he provides that attackers would wish to imagine {that a} brazen marketing campaign to focus on Kaspersky would finally be found. “In my view, this could … Read more